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INTRODUCTION 


CHAPTER  1 


INTRODUCTION 


-o 

This  Validation  Summary  Report  (VSR Y  describes  the  extent  to  which  a 
specific  Ada  compiler  conforms  to  the  Ada  Standard,  ANSI/MIL- 
STD-1815A.  This  report  explains  all  technical  terms  used  within  it 
and  thoroughly  reports  the  results  of_t££ting  this  compiler  using  the 
Ada  Compiler  Validation  Capability  <<ACVGKJ  An  Ada  compiler  must  be 
implemented  according  to  the  Ada  Standard,  and  any  implementation- 
dependent  features  must  conform  to  the  requirements  of  the  Ada 
Standard.  The  Ada  Standard  must  be  implemented  in  its  entirety,  and 
nothing  can  be  implemented  that  is  not  in  the  Standard. ~\ 

Even  though  all  validated  Ada  compilers  conform  to  the  Ada  Standard, 
it  must  be  understood  that  some  differences  do  exist  between 
implementations.  The  Ada  Standard  permits  some  implementation 
dependencies — for  example,  the  maximum  length  of  identifiers  or  the 
maximum  values  of  integer  types.  Other  differences  between  compilers 
result  from  the  characteristics  of  particular  operating  systems, 
hardware,  or  implementation  strategies.  All  the  dependencies 
observed  during  the  process  of  testing  this  compiler  are  given  in 
this  report.^ 

The  information  in  this  report  is  derived  from  the  test  results 
produced  during  validation  testing.  The  validation  process  includes 
submitting  a  suite  of  standardized  tests,  the  ACVC,  as  inputs  to  an 
Ada  compiler  and  evaluating  the  results.  The  purpose  of  validating  is 
to  ensure  conformity  of  the  compiler  to  the  Ada  Standard  by  testing 
that  the  compiler  properly  implements  leg'al  language  constructs  and 
that  it  identifies  and  rejects  illegal  language  constructs.  The 
testing  also  identifies  behavior  that  is  implementation  dependent  but 
permitted  by  the  Ada  Standard.  Six  classed  of  tests  are  used.  These 
tests  are  designed  to  perform  checks  at  compile  time,  at  link  time, 
and  during  execution. 


( 
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1.1  PURPOSE  OF  THIS  VALIDATION  SUMMARY  REPORT 

This  VSR  documents  the  results  of  the  validation  testing  performed  on 
an  Ada  compiler.  Testing  was  carried  out  for  the  following  purposes: 

.  To  attempt  to  identify  any  language  constructs  supported  by 
the  compiler  that  do  not  conform  to  the  Ada  Standard  ; 

.  To  attempt  to  identify  any  unsupported  language  constructs 
required  by  the  Ada  Standard  ; 

.  To  determine  that  the  implementation-dependent  behavior  is 
allowed  by  the  Ada  Standard. 

Testing  of  this  compiler  was  conducted  under  the  direction  of  the  AVF 
according  to  policies  and  procedures  established  by  the  Ada 
Validation  Organization  (AVO) .  On-site  testing  was  completed  on  9 
June,  1988  at  CISI  Ingdnidrie  at  Valbonne,  France. 


1.2  USE  OF  THIS  VALIDATION  SUMMARY  REPORT 

Consistent  with  the  national  laws  of  the  originating  country,  the  AVO 
may  make  full  and  free  public  disclosure  of  this  report.  In  the 
United  States,  this  is  provided  in  accordance  with  the  "Freedom  of 
Information  Act"  {5  U.S.C.  1552).  The  results  of  this  validation 
apply  only  to  the  computers,  operating  systems,  and  compiler  versions 
identified  in  this  report. 

The  organizations  represented  on  the  signature  page  of  this  report  do 
not  represent  or  warrant  that  all  statements  set  forth  in  this  report 
are  accurate  and  complete,  or  that  the  subject  compiler  has  no 
nonconformities  to  the  Ada  Standard  other  than  those  presented. 
Copies  of  this  report  are  available  to  the  public  from: 

Ada  Information  Clearinghouse 
Ada  Joint  Program  Office 
OUSDRE 

The  Pentagon,  Rm  3D-139  (Fern  Street) 

USA  -  Washington  DC  20301-3081 


or  from: 


AFNOR 

Tour  Europe 
Cedex  7 

F-92080  Paris  la  Defense 
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Questions  regarding  this  report  or  the  validation  test  results  should 
be  directed  to  the  AVF  listed  above  or  to: 

Ada  Validation  Organization 
Institute  for  Defense  Analyses 
1801  North  Beauregard  Street 
USA  *  Alexandria  VA  22311 


1.3  REFERENCES 

1.  Reference  Manual  for  the  Ada  Programming  Language,  ANSI/MIL- 
STD-1815A,  February  1983,  and  ISO  8652-1987. 

2.  Ada  Compiler  Validation  Procedures  and  Guidelines.  Ada  Joint 
Program  Office,  1  January  1987. 

3.  Ada  Compiler  Validation  Capability  Implementers '  Guide, 
SofTech,  Inc.,  December  1986. 

4.  Ada  Compiler  Validation  Capability  User's  Guide,  December 
1986. 


1.4  DEFINITION  OF  TERMS 

ACVC  The  Ada  Compiler  Validation  Capability.  The  set  of 

Ada  programs  that  tests  the  conformity  of  an  Ada 
compiler  to  the  Ada  programming  language. 

Ada  Commentary  An  Ada  Commentary  contains  all  information  relevant 
to  the  point  addressed  by  a  comment  on  the  Ada 
Standard.  These  comments  are  given  a  unique 
identification  number  having  the  form  Al-ddddd. 

Ada  Standard  ANSI/MIL-STD-1815A,  February  1983,  and  ISO  8652-1987. 

Applicant  The  agency  requesting  validation. 

AVF  The  Ada  Validation  Facility.  In  the  context  of  this 

report,  the  AVF  is  responsible  for  conducting 
compiler  validations  according  to  procedures 

contained  in  Ada  Compiler  Validation  Procedures  and 
Guidelines. 

AVO  The  Ada  Validation  Organization.  The  AVO  has 

oversight  authority  over  all  AVF  practices  for  the 
purpose  of  maintaining  a  uniform  process  for 
validation  of  Ada  compilers.  The  AVO  provides 

administrative  and  technical  support  for  Ada 

validations  to  ensure  consistent  practices. 


7 


INTRODUCTION 


Coapiler  A  processor  for  the  Ada  language.  In  the  context  of 

this  report,  a  compiler  is  any  language  processor, 
including  cross-compilers,  translators,  and 
interpreters. 

Failed  test  An  ACVC  test  for  which  the  compiler  generates  a 

result  that  demonstrates  nonconformity  to  the  Ada 
Standard. 

Host  The  computer  on  which  the  compiler  resides. 

Inapplicable  test  An  ACVC  test  that  uses  features  of  the 

language  that  a  compiler  is  not  required  to  support 
or  may  legitimately  support  in  a  way  other  than  the 
one  expected  by  the  test. 

Passed  test  An  ACVC  test  for  which  a  compiler  generates  the 

expected  result. 

Target  The  computer  for  which  a  compiler  generates  code. 

Test  An  Ada  program  that  checks  a  compiler's  conformity 

regarding  a  particular  feature  or  combination  of 
features  to  the  Ada  Standard.  In  the  context  of  this 
report,  the  term  is  used  to  designate  a  single  test, 
which  may  comprise  one  or  more  files. 

Withdrawn  test  An  ACVC  test  found  to  be  incorrect  and  not  used  to 
check  conformity  to  the  Ada  Standard.  A  test  may  be 
incorrect  because  it  has  an  invalid  test  objective, 
fails  to  meet  its  test  objective,  or  contains  illegal 
or  erroneous  use  of  the  language. 


1.5  ACVC  TEST  CLASSES 

Conformity  to  the  Ada  Standard  is  measured  using  the  ACVC.  The  ACVC 
contains  both  legal  and  illegal  Ada  programs  structured  into  six  test 
classes:  A,  B,  C,  D,  E,  and  L.  The  first  letter  of  a  test  name 
identifies  the  class  to  which  it  belongs.  Class  A,  C,  D,  and  E  tests 
are  executable,  and  special  program  units  are  used  to  report  their 
results  during  execution.  Class  B  tests  are  expected  to  produce 
compilation  errors.  Class  L  tests  are  expected  to  produce  link 
errors. 

Class  A  tests  check  that  legal  Ada  programs  can  be  successfully 
compiled  and  executed.  However,  no  checks  are  performed  during 
execution  to  see  if  the  test  objective  has  been  met.  For  example,  a 
Class  A  test  checks  that  reserved  words  of  another  language  (other 
than  those  already  reserved  in  the  Ada  language)  are  not  treated  as 
reserved  words  by  an  Ada  compiler.  A  Class  A  test  is  passed  if  no 
errors  are  detected  at  compile  time  and  the  program  executes  to 
produce  a  PASSED  message. 
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Class  B  tests  check  that  a  compiler  detects  illegal  language  usage. 
Class  B  tests  are  not  executable.  Each  test  in  this  class  is  compiled 
and  the  resulting  compilation  listing  is  examined  to  verify  that 
every  syntax  or  semantic  error  in  the  test  is  detected.  A  Class  B 
test  is  passed  if  every  illegal  construct  that  it  contains  is 
detected  by  the  compiler. 

Class  C  tests  check  that  legal  Ada  programs  can  be  correctly  compiled 
and  executed.  Each  Class  C  test  is  self-checking  and  produces  a 
PASSED,  FAILED,  or  NOT  APPLICABLE  message  indicating  the  result  when 
it  is  executed. 

Class  D  tests  check  the  compilation  and  execution  capacities  of  a 
compiler.  Since  there  are  no  capacity  requirements  placed  on  a 
compiler  by  the  Ada  Standard  for  some  parameters — for  example,  the 
number  of  identifiers  permitted  in  a  compilation  or  the  number  of 
units  in  a  library — a  compiler  may  refuse  to  compile  a  Class  D  test 
and  still  be  a  conforming  compiler.  Therefore,  if  a  Class  D  test 
fails  to  compile  because  the  capacity  of  the  compiler  is  exceeded, 
the  test  is  classified  as  inapplicable.  If  a  Class  D  test  compiles 
successfully,  it  is  self-checking  and  produces  a  PASSED  or  FAILED 
message  during  execution. 

Each  Class  E  test  is  self-checking  and  produces  a  NOT  APPLICABLE, 
PASSED,  or  FAILED  message  when  it  is  compiled  and  executed.  However, 
the  Ada  Standard  permits  an  implementation  to  reject  programs 
containing  some  features  addressed  by  Class  E  tests  during 
compilation.  Therefore,  a  Class  E  test  is  passed  by  a  compiler  if  it 
is  compiled  successfully  and  executes  to  produce  a  PASSED  message,  or 
if  it  is  rejected  by  the  compiler  for  an  allowable  reason. 

Class  L  tests  check  that  incomplete  or  illegal  Ada  programs  involving 
multiple,  separately  compiled  units  are  detected  and  not  allowed  to 
execute.  Class  L  tests  are  compiled  separately  and  execution  is 
attempted.  A  Class  L  test  passes  if  it  is  rejected  at  link  time — that 
is,  an  attempt  to  execute  the  main  program  must  generate  an  error 
message  before  any  declarations  in  the  main  program  or  any  units 
referenced  by  the  main  program  are  elaborated. 

Two  library  units,  the  package  REPORT  and  the  procedure  CHECK_FILE, 
support  the  self-checking  features  of  the  executable  tests.  The 
package  REPORT  provides  the  mechanism  by  which  executable  tests 
report  PASSED,  FAILED,  or  NOT  APPLICABLE  results.  It  also  provides  a 
set  of  identity  functions  used  to  defeat  some  compiler  optimizations 
allowed  by  the  Ada  Standard  that  would  circumvent  a  test  objective. 
The  procedure  CHECK_FILE  is  used  to  check  the  contents  of  text  files 
written  by  some  of  the  Class  C  tests  for  chapter  14  of  the  Ada 
Standard.  The  operation  of  these  units  is  checked  by  a  set  or 
executable  tests.  These  tests  produce  messages  that  are  examined  to 
verify  that  the  units  are  operating  correctly.  If  these  units  are  not 
operating  correctly,  then  the  validation  is  not  attemped. 
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The  tex>.  of  the  tests  in  the  ACVC  follow  conventions  that  are 
intended  to  ensure  that  the  tests  are  reasonably  portable  without 
modification.  For  example,  the  tests  make  use  of  only  the  basic  set 
of  55  characters,  contain  lines  with  a  maximum  length  of  72 
characters,  use  small  numeric  values,  and  place  features  that  may  not 
be  supported  by  all  implementations  in  separate  tests.  However,  some 
tests  contain  values  that  require  the  test  to  be  customized  according 
to  implementation-specific  values  — for  example,  an  illegal  file 
name.  A  list  of  the  values  used  for  this  validation  are  listed  in 
Appendix  C. 

A  compiler  must  correctly  process  each  of  the  tests  in  the  suite  and 
demonstrate  conformity  to  the  Ada  Standard  by  either  meeting  the  pass 
criteria  given  for  the  test  or  by  showing  that  the  test  is 
inapplicable  to  the  implementation.  The  applicability  of  a  test  to  an 
implementation  is  considered  each  time  the  implementation  is 
validated.  A  test  that  is  inapplicable  for  one  validation  is  not 
necessarily  inapplicable  for  a  subsequent  validation.  Any  test  that 
was  determined  to  contain  an  illegal  language  construct  or  an 
erroneous  language  construct  is  withdrawn  from  the  ACVC  and, 
therefore,  is  not  used  in  testing  a  compiler.  The  tests  withdrawn  at 
the  time  of  validation  are  given  in  Appendix  D. 
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CHAPTER  2 

CONFIGURATION  INFORMATION 

2.1  CONFIGURATION  TESTED 

The  candidate  compilation  system  for  this  validation  was  tested  under 
the  following  configuration: 

Compiler:  SP-Ada,  Version  5.5-300 

ACVC  Version:  1.9 

Certificate  Number:  880609A1. 09109 

Host  Computer: 

Machine:  BULL  DPX  2000 

Operating  System:  SPIX 

Version  31.2 

Memory  Size:  8  Mb 

Target  Computer: 

Machine:  BULL  DPX  2000 

Operating  System:  SPIX 

Version  31.2 

Memory  Size:  8  Mb 

Communications  Network:  none 
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2.2  IMPLEMENTATION  CHARACTERISTICS 

One  of  the  purposes  of  validating  compilers  is  to  determine  the 
behavior  of  a  compiler  in  those  areas  of  the  Ada  Standard  that  permit 
implementations  to  differ.  Class  D  and  E  tests  specifically  check  for 
such  implementation  differences.  However,  tests  in  other  classes  also 
characterize  an  implementation.  The  tests  demonstrate  the  following 
characteristics: 

.  Capacities. 

The  compiler  correctly  processes  tests  containing  loop 
statements  nested  to  65  levels,  block  statements  nested  to 
65  levels,  and  recursive  procedures  separately  compiled  as 
subunits  nested  to  17  levels.  It  correctly  processes  a 
compilation  containing  723  variables  in  the  same 
declarative  part.  (See  tests  D55A03A..H  (8  tests),  D56001B, 
D64005E..G  (3  tests)  and  D29002K.) 


Universal  integer  calculations. 

An  implementation  is  allowed  to  reject  universal  integer 
calculations  having  values  that  exceed  SYSTEM.MAX_INT.  This 
implementation  processes  64  bit  integer  calculations.  (See 
tests  D4A002A,  D4A002B,  D4A004A,  and  D4A004B) . 


Predefined  types. 

This  implementation  supports  the  additional  predefined 
types  TINY_INTEGER,  SHORT_INTEGER ,  and  SHORT_FLOAT  in  the 
package  STANDARD.  (See  tests  B86001C  and  B86001D.) 


Based  literals. 

An  implementation  is  allowed  to  reject  a  based  literal  with 
a  value  exceeding  SYSTEM.MAX_INT  during  compilation,  or  it 
may  raise  NUMERIC_ERROR  or  CONSTRAINTJERROR  during 
execution.  This  implementation  raises  NUMERIC_ERROR  during 
execution.  (See  test  E24101A.) 


Expression  evaluation. 

Apparently  no  default  initialization  expressions  for  record 
components  are  evaluated  before  any  value  is  checked  to 
belong  to  a  component's  subtype.  (See  test  C32117A.) 

Assignments  for  subtypes  are  performed  with  the  same 
precision  as  the  base  type.  (See  test  C35712B) . 


12 


CONFIGURATION  INFORMATION 


This  implementation  uses  no  extra  bits  for  extra  precision. 
This  inplementation  uses  all  extra  bits  for  extra  range. 
(See  test  C35903A) . 

Sometimes  NUMERIC_ERROR  is  raised  when  an  integer  literal 
operand  in  a  comparison  or  membership  test  is  outside  the 
range  of  the  base  type.  (See  test  C45232A.) 

Sometimes  NUMERIC.ERROR  is  raised  when  a  literal  operand  in 
a  fixed  point  comparison  or  membership  test  is  outside  the 
range  of  the  base  type.  (See  test  C45252A.) 

Apparently  underflow  is  gradual.  (See  tests  C45524A..Z.) 


Rounding 

The  method  used  for  rounding  to  integer  is  apparently  round 
to  even.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  longest  integer  is 
apparently  round  to  even.  (See  tests  C46012A..Z.) 

The  method  used  for  rounding  to  integer  in  static  universal 
real  expressions  is  apparently  round  to  even. (See  test 
C4A014A. ) 


Array  types. 

An  implementation  is  allowed  to  raise  NUMERIC_ERROR  or 
CONSTRAINTJERROR  for  an  array  having  a  ’LENGTH  that  exceeds 
STANDARD. INTEGER' LAST  and/or  SYSTEM . MAX_INT .  For  this 
implementation: 

Declaration  of  an  array  type  or  subtype  declaration  with 
more  than  SYSTEM. MAX_INT  components  raises  no  exception. 
(See  test  C36003A) . 

NUMERIC_ERROR  is  raised  when  'LENGTH  is  applied  to  an  array 
type  with  INTEGER'LAST  +  2  components.  (See  test  C36202A.) 

NUMERIC_ERROR  is  raised  when  'LENGTH  is  applied  to  an  array 
type  with  SYSTEM. MAX  INT  +  2  components.  (See  test 
C36202B.) 

A  packed  BOOLEAN  array  having  a  'LENGTH  exceeding 
INTEGER'LAST  raises  NUMERIC_ERROR  when  the  array  type  is 
declared.  (See  test  C52103X.) 

A  packed  two-dimensional  BOOLEAN  array  with  more  than 
INTEGER'LAST  components  raises  NUMERIC  JERROR  when  the  array 
type  is  declared  (See  test  C52104Y.) 
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A  null  array  with  one  dimension  of  length  greater  than 
INTEGER' LAST  Bay  raise  NUMERICJERROR  or  CONSTRAINT_ERROR 
either  when  declared  or  assigned.  Alternatively,  an 
implementation  aay  accept  the  declaration.  However,  lengths 
aust  Batch  in  array  slice  assignnents.  This  implementation 
raises  NUMERICJERROR  when  the  array  type  is  declared.  (See 
test  E52103Y.) 

In  assigning  one-dinensional  array  types,  the  expression 
appears  to  be  evaluated  in  its  entirety  before 
CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  coapatible  with  the  target's 
subtype.  In  assigning  two-dimensional  array  types,  the 
expression  does  not  appear  to  be  evaluated  in  its  entirety 
before  CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's 
subtype.  (See  test  C52013A.) 


Discriminated  types. 

During  compilation,  an  implementation  is  allowed  to  either 
accept  or  reject  an  incomplete  type  with  discriminants  that 
is  used  in  an  access  type  definition  with  a  compatible 
discriminant  constraint.  This  implementation  accepts  such 
subtype  indications.  (See  test  E38104A.) 

In  assigning  record  types  with  discriminants,  the 
expression  appears  to  be  evaluated  in  its  entirety  before 
CONSTRAINT_ERROR  is  raised  when  checking  whether  the 
expression's  subtype  is  compatible  with  the  target's 
subtype.  (See  test  C52013A.) 


Aggregates. 

In  the  evaluation  of  a  multi-dimensional  aggregate,  all 
choices  appear  to  be  evaluated  before  checking  against  the 
index  type.  (See  tests  C43207A  and  C43207B.) 

In  the  evaluation  of  an  aggregate  containing  subaggregates, 
all  choices  are  evaluated  before  being  checked  for 
identical  bounds.  (See  test  E43212B.) 

All  choices  are  evaluated  before  CONSTRAINT.ERROR  is  raised 
if  a  bound  in  a  nonnull  range  of  a  nonnull  aggregate  does 
not  belong  to  an  index  subtype.  (See  test  E43211B.) 
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Representation  clauses 

An  implementation  night  legitimately  place  restrictions  on 
representation  clauses  used  by  some  of  the  tests.  If  a 
representation  clause  is  used  by  a  test  in  a  way  that 
violates  a  restriction,  then  the  implementation  must  reject 
it. 

Enumeration  representation  clauses  containing  noncontiguous 
values  for  enumeration  types  other  than  character  and 
boolean  types  are  supported.  (See  tests  C35502I..J, 
C3S502M..N,  and  A39005F.) 

Enumeration  representation  clauses  containing  noncontiguous 
values  for  character  types  are  supported.  (See  tests 
C35507I. . J,  C35507M..N,  and  C55B16A.) 

Enumeration  representation  clauses  for  boolean  types 
containing  representational  values  other  than  (FALSE  =>  0, 
TRUE  =>  i)  are  supported.  (See  tests  C35508I..J, 
C35508M..N.) 

Length  clauses  with  SIZE  specifications  for  enumeration 
types  are  supported.  (See  test  A39005B.) 

Length  clauses  with  STORAGE_SIZE  specifications  for  access 
types  are  supported.  (See  tests  A39005C  and  C87B62B) . 

Length  clauses  with  STORAGE_SIZE  specifications  for  task 
types  are  supported.  (See  tests  A39005D  and  C87B62D.) 

Length  clauses  with  SMALL  specifications  are  supported. 
(See  tests  A39005E  and  C87B62C.) 

Certain  record  representation  clauses  are  supported, 
however  not  the  clause  appearing  in  A39005G,  which  is 
therefore  not  applicable. 

Length  clauses  with  SIZE  specifications  for  derived  integer 
types  are  supported.  (See  test  C87B62A.) 


Pragmas 

The  pragma  INLINE  is  supported  for  procedures.  The  pragma 
INLINE  is  supported  for  functions.  (See  tests  LA3004A, 
EA3004C,  EA3004D,  CA3004E,  and  CA3004F.) 
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Input /output. 

The  package  SEQUENTIAL_IO  can  be  instantiated  with 
unconstrained  array  types  and  record  types  with 
discriminants  without  defaults.  (See  tests  AE2101C, 
EE2201D,  and  EE2201E.) 

The  package  DIRECT.IO  can  be  instantiated  with 
unconstrained  array  types  and  record  types  with 
discriminants  without  defaults.  (See  tests  AE2101H,  EE2401D 
and  EE2401G. ) 

There  are  strings  which  are  illegal  external  file  names  for 
SEQUENTIAL_IO  and  DIRECT_IO.  (See  tests  CE2102C  and 
CE2102H. ) 

Modes  IN_FILE  and  OUT_FILE  are  supported  for  SEQUENTIAL_IO 
(See  tests  CE2102D  and" CE2102E.) 

Modes  INJFILE,  OUT_FILE,  and  INOUT_FILE  are  supported  for 
DIRECT.IO.  (See  tests  CE2102F,  CE2102I,  and  CE2102J.) 

RESET  and  DELETE  are  supported  for  SEQUENTIAL_IO  and 
DIRECT.IO.  (See  tests  CE2102G  and  CE2102K.) 

Dynamic  creation  and  deletion  of  files  are  supported  for 
SEQUENTIAL  10  and  DIRECT_IO.  (See  tests  CE2106A  and 
CE2106B. ) 

Overwriting  to  a  sequential  file  truncates  the  file  to  last 
element  written.  (See  test  CE2208B.) 

An  existing  text  file  can  be  opened  in  OUTJFILE  mode,  can 
be  created  in  0UT_FILE  mode,  and  can  be  created  in  IN_FILE 
mode.  (See  test  EE3102C.) 

More  than  one  internal  file  can  be  associated  with  each 
external  file  for  text  I/O  for  both  reading  and  writing. 
(See  tests  CE3111A..E  (5  tests),  CE3114B,  and  CE3115A.) 

More  than  one  internal  file  can  be  associated  with  each 
external  file  for  sequential  I/O  for  both  reading  and 
writing.  (See  tests  CE2107A..D  (4  tests)  and  CE2111D.) 

More  than  one  internal  file  can  be  associated  with  each 
external  file  for  direct  I/O  for  both  reading  and  writing 
(See  tests  CE2107E..I  (5  tests)  and  CE2111H.) 

An  internal  sequential  access  file  and  an  internal  direct 
access  file  can  be  associated  with  a  single  external  file 
for  writing.  (See  test  CE2107E.) 
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An  external  file  associated  with  more  than  one  internal 
file  can  be  deleted  for  SEQUENTIAL_IO,  DIRECT.IO,  and 
TEXT.IO.  (See  test  CE2110B.) 

Temporary  sequential  files  are  given  names.  Temporary 
direct  files  are  given  names.  Temporary  files  given  names 
are  deleted  when  they  are  closed.  (See  tests  CE2108A  and 
CE2108C.) 


Generics. 

Generic  subprogram  declarations  and  bodies  can  be  compiled 
in  separate  compilations.  (See  tests  CA1012A  and  CA2009F.) 

Generic  package  declarations  and  bodies  can  be  compiled  in 
separate  compilations.  (See  tests  CA2009C,  BC3204C,  and 
BC3205D.) 

Generic  unit  bodies  and  their  subunits  can  be  compiled  in 
separate  compilations.  (See  test  CA3011A.) 
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TEST  INFORMATION 


3.1  TEST  RESULTS 

Version  1.9  of  the  ACVC  comprised  3122  tests.  When  this  compiler  was 
tested,  27  tests  had  been  withdrawn  because  of  test  errors.  The  AVF 
determined  that  227  tests  were  inapplicable  to  this  implementation. 
All  inapplicable  tests  were  processed  during  testing  except  for  201 
executable  tests  that  use  floating-point  precision  exceeding  that 
supported  by  the  implementation.  Modifications  to  the  code, 
processing,  or  grading  for  25  tests  were  required  to  successfully 
demonstrate  the  test  objective.  (See  section  3.6.) 

The  AVF  concludes  that  the  testing  results  demonstrate  acceptable 
conformity  to  the  Ada  Standard. 


3.2  SUMMARY  OF  TEST  RESULTS  BY  CLASS 


RESULT  TEST  CLASS  TOTAL 


A 

B 

C 

D 

E 

L 

Passed 

109 

1049 

1629 

17 

18 

46 

2868 

Inapplicable 

1 

2 

224 

0 

0 

0 

227 

Withdrawn 

3 

2 

21 

0 

1 

0 

27 

TOTAL 

113 

1053 

1874 

17 

19 

46 

3122 
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3.3  SUMMARY  OF  TEST  RESULTS  BY  CHAPTER 


RESULT  CHAPTER 

2  3  4  5  6  7  8  9  10  11  12 

Passed  190  499  539  245  166  98  142  326  137  36  234 

Inapplicable  14  73  135  3  0  0  1  1  0  0  0 

Withdrawn  2  14  300120002 

TOTAL  206  586  677  248  166  99  145  327  137  36  236 


TOTAL 

13  14 

3  253  2868 

0  0  227 

1  2  27 

4  255  3122 


3.4  WITHDRAWN  TESTS 

The  following  27  tests  were  withdrawn  from  ACVC  Version  1.9  at  time 
of  this  validation: 


B28003A 

E28005C 

C34004A 

C35502P 

A35902C 

C35904A 

C35904B 

C35A03E 

C35A03R 

C37213H 

C37213J 

C37215C 

C37215E 

C37215G 

C37215H 

C38102C 

C41402A 

C45332A 

C45614C 

A74106C 

C85018B 

C87B04B 

CC1331B 

BC3105A 

AD1A01A 

CE2401H 

CE3208A 

See  Appendix  D  for 

the  reason 

that  each 

of  these 

tests  was 

withdrawn 

3.5  INAPPLICABLE  TESTS 

Some  tests  do  not  apply  to  all  compilers  because  they  make  use  of 
features  that  a  compiler  is  not  required  by  the  Ada  Standard  to 
support.  Others  may  depend  on  the  result  of  another  test  that  is 
either  inapplicable  or  withdrawn.  The  applicability  of  a  test  to  an 
implementation  is  considered  each  time  a  validation  is  attempted.  A 
test  that  is  inapplicable  for  one  validation  attempt  is  not 
necessarily  inapplicable  for  a  subsequent  attempt.  For  this 
validation  attempt,  227  tests  were  inapplicable  for  the  reasons 
indicated: 


C35702B  uses  L0N6_FL0AT  which  is  not  supported  by  this 
implementation. 

A390056  uses  a  record  representation  clause  which  is  not 
supported  by  this  compiler. 

The  following  tests  use  LONG_INTEGER ,  which  is  not 
supported  by  this  compiler  : 

C45231C  C45304C  C45502C  C45503C  C45504C 

C45504F  C45611C  C45613C  C45614C  C45631C 

C45632C  B52004D  C55B07A  B55B09C 
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-  C45531M,  C45531N,  C45532M.  and  C45532N  use  fine  48  bit 
fixed  point  base  types  which  are  not  supported  by  this 
coapiler. 

-  C455310,  C45531P,  C455320,  and  C45532P  use  coarse  48  bit 
fixed  point  base  types  which  are  not  supported  by  this 
coapiler. 

C86001F  redefines  package  SYSTEM,  but  TEXT_IO  is  made 
obsolete  by  this  new  definition  in  this  implementation  and 
the  test  cannot  be  executed  since  the  package  REPORT  is 
dependent  on  the  package  TEXT_IO. 

C9600SB  requires  the  range  of  DURATION  to  be  different 
from  those  of  its  base  type;  in  this  implementation  they 
are  the  same. 

The  following  201  tests  require  a  floating-point  accuracy 
that  exceeds  the  maximum  of  IS  digits  supported  by  this 
implementation: 

C24113L..Y  (14  tests)  C35705L..Y  (14  tests) 

C35706L..Y  (14  tests)  C35707L..Y  (14  tests) 

C35708L..Y  (14  tests)  C35802L..Z  (15  tests) 

C45241L..Y  (14  tests)  C45321L..Y  (14  tests) 

C45421L..Y  (14  tests)  C45S21L..Z  (15  tests) 

C45524L. . Z  (15  tests)  C45621L..Z  (15  tests) 

C45641L..Y  (14  tests)  C46012L..Z  (15  tests)  V 


3.6  TEST,  PROCESSING,  AND  EVALUATION  MODIFICATIONS 

It  is  expected  that  some  tests  will  require  modifications  of  code, 
processing,  or  evaluation  in  order  to  compensate  for  legitimate 
implementation  behavior.  Modifications  are  made  by  the  AVF  in  cases 
where  legitimate  implementation  behavior  prevents  the  successful 
completion  of  an  (otherwise)  applicable  test.  Examples  of  such 
modifications  include:  adding  a  length  clause  to  alter  the  default 
size  of  a  collection;  splitting  a  Class  B  test  into  subtests  so  that 
all  errors  are  detected;  and  confirming  that  messages  produced  by  an 
executable  test  demonstrate  conforming  behavior  that  wasn't 
anticipated  by  the  test  (such  as  raising  one  exception  instead  of 
another) . 

Modifications  were  required  for  25  Class  B  tests. 

The  following  25  Class  B  tests  were  split  because  errors  at  one  point 
resulted  in  the  compiler  not  detecting  other  errors  in  the  test: 

B24009A  B24204A  B24204B  B24204C  B2A003A  B2A003B  B2A003C 

B33301A  B37201A  B38003A  B38003B  B38009A  B38009B  B41202A 

B44001A  B64001A  B67001A  BB67001B  B67001C  B67001D  B91003B 

B95001A  B97102A  BC1303F  BC3005C 
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3.7  ADDITIONAL  TESTING  INFORMATION 

3.7.1  Prevalidation 

Prior  to  validation,  a  set  of  test  results  for  ACVC  Version  1.9 
produced  by  SP-Ada,  was  submitted  to  the  AVF  by  the  applicant  for 
review.  Analysis  of  these  results  demonstrated  that  the  compiler 
successfully  passed  all  applicable  tests,  and  the  compiler  exhibited 
the  expected  behavior  on  all  inapplicable  tests. 


3.7.2  Test  Method 

Testing  of  the  SP-Ada  using  ACVC  Version  1.9  was  conducted  on-site  by 
a  validation  team  from  the  AVF.  The  configuration  consisted  of  a  BULL 
DPX  2000  operating  under  SPIX,  Version  31.2. 

A  tape  containing  all  tests  has  been  sent  to  CISI  Ing6ni6rie  for 
pre-validation. Tests  that  make  use  of  implementation-specific  values 
were  customized  by  CISI  Ingdnidrie  after  loading  of  the  tape.  At 
validation  time  the  contents  of  the  tape  were  not  loaded  again  onto 
the  host  computer,  but  all  test  sources  were  checked  on-site  against 
those  used  for  prevalidation.  The  full  set  of  tests  was  compiled, 
linked  and  all  executable  tests  were  run.  Results  were  stored  on  tape 
after  checking. 

The  compiler  was  tested  using  command  scripts  provided  by  CISI 
Ingdnidrie  and  reviewed  by  the  validation  team.  The  compiler  was 
tested  using  all  default  switch  /  option  settings. 

Tests  were  compiled,  linked,  and  executed  (as  appropriate)  using  a 
single  host  computer.  Test  outputs,  compilation  listings,  and  job 
logs  were  captured  on  a  tape  and  archived  at  the  AVF.  The  listings 
examined  on-site  by  the  validation  team  were  also  archived. 


3.7.3  Test  Site 

Testing  was  conducted  at  Valbonne,  France  and  was  completed  on  9  June 
1988. 
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APPENDIX  A 


DECLARATION  OF  CONFORMANCE 


CISI  Ing6ni6rie  has  submitted  the  following  conformance  statement 
concerning  the  SP-Ada. 
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DECLARATION  OF  CONFORMANCE 


Compiler  Implementor:  CISI  Ingdnidrie. 

Ada*  Validation  Facility: 

AFNOR,  Tour  Europe,  Cedex  7,  F-92080  Paris  la  Defense 
Ada  Compiler  Validation  Capability  (ACVC)  Version:  1.9 


Base  Configuration 

Base  Compiler  Name:  SP-Ada,  Version:  Version  5.5-300 

Host  Architecture  ISA:  BULL  DPX  2000  OS&VER  |:  SPIX,  Version  31.2 

Target  Architecture  ISA:  BULL  DPX  2000  OSfcVER  t:  SPIX,  Version  31.2 


Implementor's  declaration 


I,  the  undersigned,  representing  CISI  Ing6ni6rie,  have  implemented  no 
deliberate  extensions  to  the  Ada  Language  Standard  ANSI/MIL-STD-1815A 
in  the  compiler  listed  in  this  declaration.  I  declare  that  CISI 
Ing6ni6rie  is  the  owner  of  record  of  the  Ada  language  compiler  listed 
above  and,  as  such,  is  responsible  for  maintaining  said  compilers  in 
conformance  to  ANSI-MIL-STD-1815A.  All  certificates  and  registrations 
for  Ada  language  compiler  listed  in  this  declaration  shall  be  made 
only  in  the  owner's  corporate  name. 


CJ5^Ting6ni6rie 
Bernard  HENNEBELLE,  Director  of  Provence-Est  Agency 


Date:  Q3  octobrs  398S 


*Ada  is  a  registred  trademark  of  the  United  States  Government 
(Ada  Joint  Program  Office) . 
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Owner's  Declaration 


I,  the  undersigned,  representing  BULL  S.A.,  take  full  responsability 
for  iaplenentation  and  maintenance  of  the  Ada*  compiler  listed  above, 
and  agree  to  the  public  disclosure  of  the  final  Validation  Summary 
Report.  I  further  agree  to  continue  to  comply  with  the  Ada  trademark 
policy,  as  defined  by  the  Ada  Joint  Program  Office.  I  declare  that 
all  of  the  Ada  language  compilers  listed,  and  their  host/target 
performance  are  in  compliance  with  the  Ada  Language  Standard 
ANSI/MIL-STD-1815A. 


^  oc/(rriVf “i.  ^  If* 


*Ada  is  a  registred  trademark  of  the  United  States  Government 
(Ada  Joint  Program  Office) . 
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APPENDIX  F  OF  THE  Ada*  STANDARD 


The  only  allowed  implementation  dependencies  correspond  to 
implementation-dependent  pragmas,  to  certain  machine-dependent 
conventions  as  mentioned  in  chapter  13  of  the  Ada  Standard,  and  to 
certain  allowed  restrictions  on  representation  clauses.  The 
implementation-dependent  characteristics  of  the  EMER-Ada,  Version 
5.5-SPS7/70,  are  described  in  the  following  sections  which  discuss 
topics  in  Appendix  F  of  the  Ada  Standard.  Implementation-specific 
portions  of  the  package  STANDARD  are  also  included  in  this  appendix. 

package  STANDARD  is 


type  TINY_INTEGER  is  range  -128 

type  SHORT_INTEGER  is  range  -(2**15)  .. 

type  INTEGER  is  range  -(2**31)  .. 


127; 

(2**15-1) ; 
(2**31— 1 ) ; 


type  SHORT_FLOAT  is  digits  6  range 
-3.402_82E+38  ..  3.402_82E+38; 


type  FLOAT  is  digits  15  range 

-1.797  693  134  862  31E+308  ..  1.797_693_134_862_31E+308; 


type  DURATION  is  delta  1.0E-3  range 

-2  147  483.648  ..  2_147_483 .647; 


end  STANDARD  ; 


*Ada  is  a  registred  trademark  of  the  United  States  Government 
(Ada  Joint  Program  Office) . 
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1  Implementation-Dependent  Pragaas 


1.1.  SHARE.BODY  pragma 

This  pragma  may  be  used  instead  of  SHARE_CODF.  pragma  with  the  same 
effect. 


1.2.  SHARE_CODE  pragma 

The  SHARE_CODE  pragma  takes  the  name  of  a  generic  instantiation  or  a 
generic  unit  as  the  first  argument  and  one  of  the  identifiers  TRUE  or 
FALSE  as  the  second  argument.  This  pragma  is  only  allowed  immediately 
at  the  place  of  a  declarative  item  in  a  declarative  part  or  package 
specification,  or  after  a  library  unit  in  a  compilation,  but  before 
any  subsequent  compilation  unit. 

When  the  first  argument  is  a  generic  unit  the  pragma  applies  to  all 
instantiations  of  that  generic.  When  the  first  argument  is  the  name 
of  a  generic  instantiation  the  pragma  applies  only  to  the  specified 
instantiation,  or  overloaded  instantiations. 

If  the  second  argument  is  TRUE  the  compiler  will  try  to  share  code 
generated  for  a  generic  instantiation  with  code  generated  for  other 
instantiations  of  the  same  generic.  When  the  second  argument  is  FALSE 
each  instantiation  will  get  a  unique  copy  of  the  generated  code.  The 
extent  to  which  code  is  shared  between  instantiations  depends  on  this 
pragma  and  the  kind  of  generic  formal  parameters  declared  for  the 
generic  unit. 


1.3.EXTERNAL_NAME  Pragma 

The  EXTERNAL_NAME  pragma  takes  the  name  of  a  a  subprogram  or  variable 
defined  in  Ada  and  allows  the  user  to  specify  a  different  external 
name  that  may  be  used  to  reference  the  entity  from  other  languages. 
The  pragma  is  allowed  at  the  place  of  a  declarative  item  in  a  package 
specification  and  must  apply  to  an  object  declared  earlier  in  the 
same  package  specification. 


1.4.  INLINE_ONLY  pragma 

Pragma  INLINE_ONLY  when  used  in  the  same  way  as  pragma  INLINE, 
indicates  to  the  compiler  that  the  subprogram  must  always  be  inlined 
(very  important  for  some  code  procedures) .  This  pragma  also 
suppresses  the  generation  of  a  callable  version  of  the  routine  which 
saves  code  space. 
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1.5.  INTERFACEjOBJECT  Pragma 

The  INT£RFACE_OBJECT  pragma  takes  the  name  of  a  variable  defined  in 
another  language  and  allows  it  to  be  referenced  directly  in  Ada.  The 
pragma  will  replace  all  occurrences  of  the  variable  name  with  an 
external  reference  to  the  second,  link.argument.  The  pragma  is 
allowed  at  the  place  of  a  declarative  item  in  a  package  specification 
and  must  apply  to  an  object  declared  earlier  in  the  same  package 
specification.  The  object  must  be  declared  as  a  scalar  or  an  access 
type.  The  object  cannot  be- any  of  the  following: 

a  loop  variable, 
a  constant, 

an  initialized  variable, 
an  array,  or 
a  record. 


1.6.  IMPLICIT_CODE  Pragma 

Takes  one  of  the  identifiers  ON  or  OFF  as  the  single  argument.  This 
pragma  is  only  allowed  within  the  declarative  part  of  a  machine  code 
procedure.  It  specifies  that  implicit  code  generated  by  the  compiler 
be  allowed  or  disallowed.  A  warning  is  issued  if  OFF  is  used  and  any 
implicit  code  needs  to  be  generated.  The  default  is  ON. 


1.7.  NO_IMAGE  pragma 

Pragma  NO_IMAGE  suppresses  the  generation  of  the  image  array  used  for 
the  IMAGE  attribute  of  enumeration  types.  This  eliminates  the 
overhead  required  to  store  the  array  in  the  executable  image. 


2.  Implementation  of  Predefined  Pragmas 


2.1.  CONTROLLED 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect  in 
the  current  release. 


2.2.  ELABORATE 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 
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2.3.  INLINE 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM, 
with  the  addition  that  recursive  calls  can  be  expanded  with  the 
pragma  up  to  the  naxiaum  depth  of  8.  Warnings  are  produced  for  too- 
deep  nestings  or  for  bodies  that  are  not  available  for  in-line 
expansion. 


2.4.  INTERFACE 

This  pragma  supports  calls  to  ’C*  and  FORTRAN  functions.  The  Ada 
subprograms  can  be  either  functions  or  procedures.  The  types  of 
parameters  and  the  result  type  for  functions  must  be  scalar,  access 
or  the  predefined  type  ADDRESS  in  SYSTEM.  An  optional  third  argument 
overrides  the  default  link  name.  All  parameters  must  have  mode  IN. 
Record  and  array  objects  can  be  passed  by  reference  using  the  ADDRESS 
attribute. 


2.5.  LIST 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 


2.6.  MEMORY_SIZE 

This  pragma  is  recognized  by  the  implementation.  The  implementation 
does  not  allow  SYSTEM  to  be  modified  by  means  of  pragmas,  the  SYSTEM 
package  must  be  recompiled. 


2.7.  OPTIMIZE 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect. 
Code  optimization  options  are  offered  via  optional  arguments  in 
compiler  invokation  command. 


2.8.  PACK 

This  pragma  will  cause  the  compiler  to  choose  a  non-aligned 
representation  for  composite  types  to  minimize  gaps  between 
components. 

-  Components  that  are  smaller  than  a  STORAGE_UNIT  are  packed  into  a 
number  of  bits  that  is  a  power  of  two. 

-  Components  larger  than  a  single  STORAGE_UNIT  are  packed  to  the 
nearest  STORAGE  UNIT. 
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2.9.  PAGE 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 
It  is  also  recognized  by  the  source  code  formatting  tool  released 
with  the  compiler. 


2.10.  PRIORITY 

This  pragma  is  implemented  as  described  in  Appendix  B  of  the  Ada  RM. 


2.11.  SHARED 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect  in 
the  current  release. 


2.12.  STORAGEJJNIT 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect  in 
the  current  release.  The  implementation  does  not  allow  SYSTEM  to  be 
modified  by  means  of  pragmas.  However,  the  same  effect  can  be 
achieved  by  recompiling  package  SYSTEM  with  altered  values. 


2.13.  SUPPRESS 

Pragma  suppress  is  supported  in  the  single  parameter  form,  the  pragma 
applies  from  the  point  of  occurrence  to  the  end  of  the  innermost 
enclosing  block.  DIVISION_CHECK  cannot  be  suppressed.  The  double 
parameter  form  of  the  pragma  with  the  name  of  an  object  type,  or 
subtype,  is  recognized,  but  has  no  effect  in  the  current  release. 


2.14.  SYSTEMJNAME 

This  pragma  is  recognized  by  the  implementation  but  has  no  effect  in 
the  current  release.  The  implementation  does  not  allow  SYSTEM  to  be 
modified  by  means  of  pragmas.  However,  the  same  effect  can  be 
achieved  by  recompiling  package  SYSTEM  with  altered  values. 


3.  Implementation-Dependent  Attributes 

The  compiler  provides  one  implementation-defined  attribute,  'REF. 
There  are  two  forms  of  use  for  this  attribute:  X'REF  and 
SYSTEM. ADDRESS' REF (N) .  X'REF  is  used  only  in  machine  code  procedures, 
while  SYSTEM.  ADDRESS 'REF  (N)  can  be  used  anywhere  to  convert  an 
integer  expression  to  an  address. 
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3.1.  X'REF 

The  attribute  generates  a  REFerence  to  the  entity  to  which  it  is 
applied.  In  X'REF,  X  nust  be  either  a  constant,  variable,  procedure, 
function,  or  label.  The  attribute  returns  a  value  of  the  type 
MACHINE_CODE. OPERAND  and  nay  only  be  used  to  designate  an  operand 
within  a  code-statenent. 


3.2.  SYSTEM. ADDRESS' REF (N) 

The  effect  of  this  attribute  is  similar  to  the  effect  of  an 
UNCHECKED .CONVERSION  from  INTEGER  to  ADDRESS.  However,  this  attribute 
should  be  used  instead  in  the  following  listed  circumstances,  and  in 
these  circumstances,  N  must  be  static. 

-  in  any  instance  where  N  is  greater  than  INTEGER 'LAST 

-  to  place  an  object  at  an  address  in  using  an  address  clause 
representation  specification. 


4.  Specification  Of  Package  SYSTEM 
package  SYSTEM  is 

type  NAME  is  (  sps_unix  } ; 

SYSTEM_NAME  :  constant  NAME  :=  sps_unix; 

STORAGEJJNIT  :  constant  :=  8; 

MEMORY_SIZE  :  constant  :=  16J777J216; 

—  System-Dependent  Named  Numbers 


MIN_INT 

MAX_INT 

MAX_DIGITS 

MAXMANTISSA 

FINE_DELTA 

TICK 


:  constant  :=  -2_147_483_648; 
:  constant  :=  2_147_483_647; 

:  constant  :=  15; 

:  constant  :=  31; 

:  constant  :=  2.0** (-31); 

:  constant  :=  0.01; 


—  Other  System-dependent  Declarations 
subtype  PRIORITY  is  INTEGER  range  0  ..  99; 
MAX_REC_SIZE  :  integer  :=  64*1024; 
type  ADDRESS  is  private; 


NO_ADDR  :  constant  ADDRESS; 

function  PHYSICAL_ADDRESS(I:  INTEGER)  return  ADDRESS; 
function  ADDR_GT (A ,  B:  ADDRESS)  return  BOOLEAN; 
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function  ADDR_LT(A,  B:  ADDRESS)  return  BOOLEAN; 

function  ADDR_GE(A,  B:  ADDRESS)  return  BOOLEAN; 

function  ADDR_LE(A,  B:  ADDRESS)  return  BOOLEAN; 

function  ADDR_DIFF{A,  B:  ADDRESS)  return  INTEGER; 

function  INCR_ADDR(A:  ADDRESS;  INCR:  INTEGER)  return  ADDRESS; 

function  DECR_ADDR(A:  ADDRESS;  DECR:  INTEGER)  return  ADDRESS; 

function  ">"(A,  B:  ADDRESS)  return  BOOLEAN  renames  ADDR_GT; 
function  "<"(A,  B:  ADDRESS)  return  BOOLEAN  renames  ADDR_.LT; 
function  ">="(A,  B:  ADDRESS)  return  BOOLEAN  renames  ADDR_GE; 
function  "<-H(A,  B:  ADDRESS)  return  BOOLEAN  renames  ADDR_LE ; 
function  "-"(A,  B:  ADDRESS)  return  INTEGER  renames  ADDR_DIFF ; 
function  "+"(A:  ADDRESS;  INCR:  INTEGER)  return  ADDRESS 
renames  INCR_ADDR; 

function  "-"(A^ADDRESS;  DECR:  INTEGER)  return  ADDRESS 
renames  DECR_ADDR; 

pragma  inline (PHYSICAL_ADDRESS) ; 
pragma  inline (ADDR_GT) ; 
pragma  inline (ADDR_LT) ; 
pragma  inline (ADDRjGE) ; 
pragma  inline (ADDR_LE) ; 
pragma  inline (ADDR_DIFF) ; 
pragma  inline (INCR_ADDR) ; 
pragma  inline (DECR_ADDR) ; 

private 

type  ADDRESS  is  new  integer; 

NO_ADDR  :  constant  ADDRESS  :=  0; 
end  SYSTEM; 


5.  Representation  Specifications 


5.1.  Pragma  PACK 

Array  and  record  components  that  are  smaller  than  a  STORAGE.UNIT  are 
packed  into  a  number  of  bits  that  is  a  power  of  two.  Objects  and 
larger  components  are  packed  to  the  nearest  whole  STORAGEJJNIT. 


5.2.  Length  clauses 

All  length  clauses  are  supported. 


5.3.  Enumeration  representation  clauses 
Enumeration  representation  clauses  are  supported. 
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5.4.  Record  Representation  Clauses 

The  only  restrictions  on  record  representation  specifications  are  the 
following: 

-  if  a  conponent  does  not  start  and  end  on  a  storage  unit  boundary, 
it  nust  be  possible  to  get  it  into  a  register  with  one  move 
instruction. 

-  a  component  that  is  itself  a  record  must  occupy  a  power  of  2  bits. 
Components  that  are  of  a  discrete  type  or  packed  array  can  occupy  an 
arbitrary  nuaber  of  bits,  subject  to  the  above  restrictions. 


5.5.  Change  of  representation 
Change  of  representation  is  supported. 


5.6.  Address  Clauses 

Address  clauses  are  supported  for  objects  and  entries.  Interrupt 
entries  are  specified  with  the  number  of  the  UNIX  signal.  See  below. 

5.7.  Interrupts 

Interrupt  entries  are  supported  for  UNIX  signals.  The  Ada  for  clause 
gives  the  UNIX  signal  number. 


5.8.  Representation  Attributes 

The  ADDRESS  attribute  is  supported  for  the  following  entities: 

Variables 

Constants 

Subprograms 

The  ADDRESS  attribute  is  not  supported  for  the  following  entities: 

Packages 

Tasks 

Labels 

Entries 
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5.9.  Machine  Code  Insertions 
Machine  code  insertions  are  supported. 

The  general  definition  of  the  package  MACHINE_CODE  provides  an 
assembly  language  interface  for  the  target  machine,  including: 

-  the  necessary  record  types  needed  in  the  code  stateaent, 

-  an  enumeration  type  of  all  the  opcode  mneumonics, 

-  a  set  of  register  definitions, 

-  and  a  set  of  addressing  node  functions. 

The  general  syntax  of  a  machine  code  stateaent  is  as  follows: 

CODE_n'(  opcode,  operand  !,  operand)  ); 

where  n  indicates  the  number  of  operands  in  the  aggregate. 

A  special  case  arises  for  a  variable  number  of  operands.  The  operands 
are  listed  within  a  subaggregate.  The  format  is  as  follows: 

CODE_N' (  opcode,  (operand  {,  operand))  ); 

For  those  opcodes  that  require  no  operands,  named  notation  must  be 
used  (cf .  RM  4.3(4) ) . 

CODE_0'(  op  *>  opcode  ); 

The  opcode  must  be  an  enumeration  literal  (i.e.  it  cannot  be  an 
object,  attribute,  or  a  rename). 

An  operand  can  only  be  an  entity  defined  in  MACHINE_CODE  or  the  'REF 
attribute. 

The  arguments  to  any  of  the  functions  defined  in  MACHINEjCODE  must  be 
static  expressions,  string  literals,  or  the  functions  defined  in 
MACHINEjCODE . 

Inline  expansion  of  machine  code  procedures  is  supported. 


6.  Restrictions  on  Unchecked  Conversions 
None. 


7.  Restrictions  on  Unchecked  Deallocations 
None. 
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8.  Implementation  Characteristics  of  I/O  Packages 

Instantiations  of  DIRECT_IO  use  the  value  KAX_REC_SIZE  as  the  record 
size  (expressed  in  STORAGEJJNITS)  when  the  size  of  ELEMENT_TYPE 
exceeds  that  value.  For  example  for  unconstrained  arrays  such  as 
string  where  ELEMENTJTYPE'SIZE  is  very  large,  MAX_REC_SIZE  is  used 
instead.  MAXJRECORD_SIZE  is  defined  in  SYSTEM  and  can  be  changed  by  a 
program  before  instantiating  DIRECT.IO  to  provide  an  upper  limit  on 
the  record  size.  In  any  case  the  maximum  size  supported  is  1024  x 
1024  x  STORAGEJJNIT  bits.  DIRECT_I0  will  raise  USEJERROR  if 
MAX_REC_SIZE  exceeds  this  absolute  limit. 

Instantiations  of  SEQUENTIAL_IO  use  the  value  MAX_REC_SIZE  as  the 
record  size  (expressed  in  STORAGEJJNITS)  when  the  size  of 
ELEMENT_TYPE  exceeds  that  value.  For  example  for  unconstrained  arrays 
such  as  string  where  ELEMENTJTYPE'SIZE  is  very  large,  MJVX_REC_SIZE  is 
used  instead.  MAX_RECORD_SIZE  is  defined  in  SYSTEM  and  can  be  changed 
by  a  program  before  instantiating  INTEGER_IO  to  provide  an  upper 
limit  on  the  record  size.  SEQUENTIAL_IO  imposes  no  limit  on 
MAX  REC  SIZE. 


9.  Implementation  Limits 

The  following  limits  are  actually  enforced  by  the  implementation.  It 
is  not  intended  to  imply  that  resources  up  to  or  even  near  these 
limits  are  available  to  every  program. 


10.1.  Source  file  limits 

-  499  characters  per  source  line 

-  499  characters  in  identifiers  and  literals 

-  1296  Ada  units  per  source  file 

-  32767  lines  per  source  file 


10.2.  Record  and  Array  Sizes 

The  maximum  size  of  a  statically  sized  record  type  is  4,000,000  x 
STORAGEJJNITS.  A  record  type  or  array  type  declaration  that  exceeds 
these  limits  will  generate  a  warning  message. 


10.3.  Default  Stack  Size  for  Tasks 

In  the  absence  of  an  explicit  STORAGE_SIZE  length  specification  every 
task  except  the  main  program  is  allocated  a  fixed  size  stack  of 
10,240  STORAGEJJNITS .  This  is  the  value  returned  by  T'STORAGE_SIZE 
for  a  task  type  T. 


34 


APPENDIX  F  OF  THE  Ada  STANDARD 


10.4.  Default  Collection  Size 

In  the  absence  of  an  explicit  STORAGE_SIZE  length  attribute  the 
default  collection  size  for  an  access  type  is  100,000  STORAGE_UNITS . 
This  is  the  value  returned  by  T'STORAGE_SIZE  for  an  access  type  T. 
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TEST  PARAMETERS 


Certain  tests  in  the  ACVC  make  use  of  implementation-dependent 
values,  such  as  the  maximum  length  of  an  input  line  and  invalid  file 
names.  A  test  that  makes  use  of  such  values  is  identified  by  the 
extension  .TST  in  its  file  name.  Actual  values  to  be  substituted  are 
represented  by  names  that  begin  with  a  dollar  sign.  A  value  must  be 
substituted  for  each  of  these  names  before  the  test  is  run.  The 
values  used  for  this  validation  are  given  below. 


Name  and  Meaning  Value 


$BIG_ID1  (498  *  'A’)  &  '1' 

Identifier  the  size  of  the 
maximum  input  line  length 
with  varying  last  character. 

$BIG_ID2  (498  *  ’A’)  &  ’2’ 

Identifier  the  size  of  the 
maximum  input  line  length 
with  varying  last  character. 

$BIG_ID3  (249  *  ’A1}  &  '3'  &  (249  *  'A') 

Identifier  the  size  of  the 
maximum  input  line  length 
with  varying  middle 
character. 

$BIG_ID4  (249  *  'A')  &  ’4’  &  (249  *  ’A’) 

Identifier  the  size  of  the 
maximum  input  line  length 
with  varying  middle 
character. 

$BIG_INT_LIT  (496  *  ’O’)  &  *298’ 

An  integer  literal  of  value 
298  with  enough  leading 
zeroes  so  that  it  is  the 
size  of  the  maximum  line 
length. 
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Name  and  Meaning 


$BIG_REAL_LIT 

A  universal  real  literal  of 
value  690.0  with  enough 
leading  zeroes  to  be  the 
size  of  the  maximum  line 
length. 

$BIG_STRING1 
A  string  literal  which 
when  catenated  with 
BIG_STRING2  yields  the 
image  of  BIG_ID1. 

$BIG_STRING2 
A  string  literal  which 
when  catenated  with  the 
end  of  BIG_STRING1  yields 
the  image  of  BXG_ID1. 

$BLAMKS 

A  sequence  of  blanks  twenty 
characters  less  than  the  size 
of  the  maximum  line  length. 

$COUWT_LAST 
A  universal  integer 
literal  whose  value  is 
TEXT_I0 . COUNT ' LAST . 

$FIELD_LAST 
A  universal  integer 
literal  whose  value  is 
TEXT_IO . FIELD ' LAST . 

$FILE_NAME_VITH_BAD_CHAR 
An  external  file  name  that 
either  contains  invalid 
characters  or  is  too  long. 

$FILE_NAME_WITH_WILD_CARD_CHAR 
An  external  file  name  that 
either  contains  a  wild 
card  character  or  is  too 
long. 

$GREATER_THAN_DURATION 
A  universal  real  literal 
that  lies  between 
DURATION' BASE* LAST  and 
DURATION ’ LAST  or  any  value 
in  the  range  of  DURATION. 


Value 


(493  *  ’O')  &  '69.0E1' 


{199  *  'A') 


(299  *  'A')  &  '1' 


{479  *  '  ') 


2  147  483_647 


2  147  483  647 


/illegal/f ile_name/2 { ] $%2102C . DAT" 


"/illegal/f ile_name/CE2102C*. DAT" 


100  000.0 
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Rue  and  Meaning 


Value 


$GREATER_THAN _DURATION_BASE_LAST  10J300J300 . 0 
A  universal  real  literal 
that  is  greater  than 
DURATION* BASE' LAST. 


$ILLEGAL_EXTERNAL_FILE_NAME1 
An  external  file  name  which 
contains  invalid 
characters. 

$ILLEGAL_EXTERNAL_FILE_NAME2 
An  external  file  name 
which  is  too  long  (or 
illegal) . 

$INTEGER_FIRST 
A  universal  integer 
literal  whose  value  is 
INTEGER 'FIRST. 

$INTEGER_LAST 
A  universal  integer 
literal  whose  value  is 
INTEGER* LAST. 

$INTEGER_LAST_PLUS_1 
A  universal  integer 
literal  whose  value  is 
INTEGER 'LAST  +  1. 

$LES S_THAN_DURATION 
A  universal  real  literal 
that  lies  between 
DURATION 'BASE ’FIRST  and 
DURATION 'FIRST  or  any 
value  in  the  range  of 
DURATION. 

$LESS_THAN_DURATION_BASE_FIRST 
A  universal  real  literal 
that  is  less  than 
DURATION ' BASE 'FIRST . 

$MAXJDIGITS 

Maximum  digits  supported 
for  floating-point  types. 

$MAX_IN_LEN 

Maximum  input  line  length 
permitted  by  the 
implementation. 


"/no/such/directory/" 

&  "ILLEGAL  EXTERNAL  FILE  NAME1" 


"/no/such/directory/" 
i  "ILLEGAL  EXTERNAL  FILE  NAME 2" 


-2  147  483  648 


2  147  483  647 


2  147_483  648 


-100  000.0 


-10  000  000.0 


15 


499 
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Name  and  Meaning 


Value 


$MAX_INT 

A  universal  integer 
literal  whose  value  is 
SYSTEM. MAX_INT. 

$MAX_INT_PLUS_1 
A  universal  integer 
literal  whose  value  is 
SYSTEM. MAX_INT  +  1, 

$MAX_LEN_INT_BASED_LITERAL 
A  universal  integer  whose 
value  is  21111  with  enough 
leading  zeroes  in  the 
mantissa  to  be  MAX_IN_LEN 
long. 

$MAX_LEN_REAL_BASED__LITERAL 
A  universal  real  based 
literal  whose  value  is 
16:F.E:  with  enough 
leading  zeroes  in  the 
mantissa  to  be  MAX_IN_LEN 
long. 

$MAX_STRING_LITERAL 
A  string  literal  of  size 
MAX_IN_LEN,  including  the 
quote  characters. 

$MIN_INT 

A  universal  integer 
literal  whose  value  is 
SYSTEM. MIN_INT. 

$NAME 

A  name  of  a  predefined 
numeric  type  other  than 
FLOAT,  INTEGER,  SHORT_FLOAT , 
SHORT_INTEGER ,  LONG_FLOAT , 
or  LONG_INTEGER. 

$NEG_BASED_INT 
A  based  integer  literal 
whose  highest  order 
nonzero  bit  falls  in  the 
sign  bit  position  of  the 
representation  for 
SYSTEM. MAX  INT. 


2  147  483  647 


2  147  483  648 


•2:*  &  (494  *  *0') 


•16:'  &  (492  *  ‘O' 


"(497  *  'A') 


-2  147  483  648 


TINY  INTEGER 


16IFFFFFFFDI 


&  'll:* 


)  &  *F.E:  ’ 
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WITHDRAWN  TESTS 


Some  tests  are  withdrawn  from  the  ACVC  because  they  do  not  conform  to 
the  ADA  Standard.  The  following  27  tests  had  been  withdrawn  at  the 
time  of  validation  testing  for  the  reasons  indicated.  A  reference  of 
the  form  "Al-ddddd"  is  to  an  Ada  Commentary. 


B28003A:  A  basic  declaration  (line  36)  wrongly  follows  a  later 

declaration. 


E28005C: 

C34004A: 

C35502P: 

A35902C: 

C35904A: 

C35904B: 


This  test  requires  that  'PRAGMA  LIST  (ON);'  not  appear 
in  a  listing  that  has  been  suspended  by  a  previous 
•’pragma  LIST  (OFF);";  the  Ada  Standard  is  not  clear 
on  this  point,  and  the  matter  will  be  reviewed  by  the 
ALMP. 

The  expression  in  line  168  wrongly  yields  a  value 
outside  of  the  range  of  the  target  type  T,  raising 
CONSTRAINT_ERROR . 

Equality  operators  in  lines  62  &  69  should  be  inequality 
operators. 

Line  17  's  assignment  of  the  nominal  upper  bound  of  a 
fixed-  point  type  to  an  object  of  that  type  raises 
CONSTRAINT_ERROR ,  for  that  value  lies  outside  of  the 
actual  range  of  the  type. 

The  elaboration  of  the  fixed-point  subtype  on  line  28 
wrongly  raises  CONSTRAINT_ERROR,  because  its  upper  bound 
exceeds  that  of  the  type. 

The  subtype  declaration  that  is  expected  to  raise 
CONSTRAINT_ERROR  when  its  compatibility  is  checked 
against  that  of  various  types  passed  as  actual  generic 
parameters,  may  in  fact  raise  NUMERIC_ERROR  or 
CONSTRAINT_ERROR  for  reasons  not  anticipated  by  the 
test. 


C35A03E  &  R:  These  tests  assume  that  attribute  'MANTISSA  returns  0 
when  applied  to  a  fixed-point  type  with  a  null  range, 
but  the  Ada  Standard  doesn't  support  this  assumption. 
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C37213H:  The  subtype  declaration  of  SCONS  in  line  100  is  wrongly 

expected  to  raise  an  exception  when  elaborated. 

C37213J:  The  aggregate  in  line  451  wrongly  raises 

CONSTRAINT_ERROR. 

C37215C,  E,  G,  H:  Various  discriminant  constraints  are  wrongly 

expected  to  be  incompatible  with  type  CONS. 

C38102C:  The  fixed-point  conversion  on  line  23  wrongly  raises 

CONSTRAINT_ERROR. 

C41402A:  ’STORAGE_SIZE  is  wrongly  applied  to  an  object  of  an 

access  type. 

C45332A:  The  test  expects  that  either  an  expression  in  line  52 

will  raise  an  exception  or  else  MACHINE_OVERFLOWS  is 
FALSE.  However,  an  implementation  may  evaluate  the 
expression  correctly  using  a  type  with  a  wider  range 
than  the  base  type  of  the  operands,  and 

MACHINEJJVERFLOVS  may  still  be  TRUE. 

C45614C:  REPORT . INDENT_INT  has  an  argument  of  the  wrong  type 

( LONG_INTEGER ) . 

A74106C,  C85018B,  C87B04B,  CC1311B:  A  bound  specified  in  a 

fixed-point  subtype  declaration  lies  outside  of  that 
calculated  for  the  base  type,  raising  CONSTRAINT_ERROR. 
Errors  of  this  sort  occur  re  lines  37  &  59,  142  &  143, 
16  &  48,  and  252  &  253  of  the  four  tests,  respectively 
(and  possibly  elsewhere) . 

BC3105A:  Lines  159.. 168  are  wrongly  expected  to  be  incorrect; 

they  are  correct. 

AD1A01A:  The  declaration  of  subtype  INT3  raises  CONSTRAINT_ERROR 

for  implementations  that  select  INT'SIZE  to  be  16  or 
greater. 

CE2401H:  The  record  aggregates  in  lines  105  &  117  contain  the 

wrong  values . 

CE3208A:  This  test  expects  thar  an  attempt  to  open  the  default 

output  file  (after  it  was  closed)  with  mode  IN_FILE 
raises  NAME_ERROR  or  USE_ERR0R;  by  Commentary  AI-00048. 
MODE  ERROR  should  be  raised. 
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